CVE-2026-68113 drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit f952076f76d62f783e8ba4995a7c400d39354ccf...

CVE-2026-68108 drm/amdgpu/vce: fix integer overflow in image size

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536×65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...

ROOT-APP-PYPI-CVE-2026-47734 CVE-2026-47734 in dulwich - Patched by Root

Root has patched CVE-2026-47734 in the dulwich package for Root:PyPI. Multiple fixed versions available...

CVE-2026-66486

creationtimestamp| type| source ---|---|--- 2026-08-10 10:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/edsgdcj66b3ei 2026-08-10 12:15:14+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-66484 2026-08-15 00:10:28+00:00| seen|...

Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages

SummaryOn standard channels, the message update and delete handlers accepted any caller holding write access on the channel, without checking that the caller wrote the message. Write access is the same grant a member needs in order to post, so every ordinary participant in a shared channel could...

CVE-2026-66484 Path Traversal in GNU cpio

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the linktoname function without...

CVE-2026-65942

TLS hostname verification issue in Apache Ranger Client Code in versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...

CVE-2026-21083

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21065

Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21063

CVE-2026-21063 affects the AppLock component on Android. The issue is an improper export of Android application components, enabling physical attackers to bypass the app lock function. According to the CVE metrics, the exploit has a base CVSS v4.0 score of 6.8 (Medium) with Attack Vector Physical...

CVE-2026-17519

creationtimestamp| type| source ---|---|--- 2026-08-10 06:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gk3ltjbtvtoh6...

CVE-2026-19049

The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries, and processes that cookie on every request without any authentication or capability check, allowing unauthenticated users to read arbitrary data from the database and to delete...

CVE-2026-19384

creationtimestamp| type| source ---|---|--- 2026-08-10 04:47:25+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mspcaigjkv2f...

CVE-2026-65502

creationtimestamp| type| source ---|---|--- 2026-08-10 03:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msp557n4lz2y 2026-08-10 23:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msra6zpguh2o...

CVE-2026-65509

creationtimestamp| type| source ---|---|--- 2026-08-10 02:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msozryinbq2u 2026-08-10 22:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msr4trbamb2w...

CVE-2026-19381

creationtimestamp| type| source ---|---|--- 2026-08-10 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117068623277375334 2026-08-10 01:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msoxaf46yl2v 2026-08-10 02:00:02+00:00| seen|...

EUVD-2026-54982

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shellexec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possibl...

CVE-2026-65517

creationtimestamp| type| source ---|---|--- 2026-08-10 00:16:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msot3onbxd2w 2026-08-10 20:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqw5ba4yb2o...

TrueConf Server Code Execution

The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...